Privacy Policy

Who we are

ResponseWindow ("we") is a turn-based disaster response simulation game. For any question about this policy or your data, contact muindas@gmail.com.

What we collect

• Account: your email address and sign-in credentials, managed by our authentication provider (Supabase Auth).
• Gameplay: your game sessions, per-turn game state, replays, post-game analyses, achievements, progression, and daily challenge results, linked to your account.
• Trial gameplay (no account): on the public trial page we record anonymous first-party product events — a random per-tab session identifier, how far the trial progressed (turn and phase), whether it completed, and the invite or campaign tag carried by the link that brought you here, if any. These events contain no name, email, IP address, or account identity, and the identifier is discarded when the tab closes.
• Referral source (optional): when you create an account, you may tell us how you heard about ResponseWindow. We store the selected category and, only if you choose Other, the short answer you enter. The event is not linked to your email or account identity; please do not enter names or contact details.
• Feedback (optional): if you send feedback, we store the message, the page you were on (with URL query parameters removed), basic device context (browser, operating system, viewport size), and — only if you choose to provide it — a contact email. Feedback can be submitted without an account.
• Security logs: security-sensitive operations (such as creating or deleting games and accounts) are recorded with your IP address and browser user-agent for abuse prevention.

What we don't do

• No third-party analytics, advertising trackers, or pixels. We measure the product with our own anonymous first-party events only, as described above.
• No selling or renting of personal data.
• No device fingerprinting.

AI-written narrative

For accounts with AI narrative enabled, summaries of your gameplay (never your email, and never hidden game internals) are sent server-side to the selected AI provider — Anthropic or Google — to write recap and briefing text. AI output is presentation only: it cannot change game outcomes. Accounts without this feature get template-written text and no data is sent to an AI provider.

What is public

• The daily challenge leaderboard shows a deterministic anonymous handle (for example "Director-a3f2e1d8") and your run's results. Your email is never exposed.
• If you share a replay link, the public page shows an outcome summary card only — no account identity and no per-decision detail.

Where your data lives

We use the following infrastructure providers to run the service:

• Supabase — database and authentication.
• Netlify — hosting and content delivery.
• Upstash — rate-limiting metadata (request counters keyed by account id or IP address).
• Anthropic or Google — AI narrative generation, only when enabled for your account as described above.

Retention

• Account and gameplay data are kept while your account is active.
• Feedback is kept while it is being worked on; resolved feedback is archived after roughly 12 months and declined feedback deleted after roughly 6 months.
• Security logs are retained for abuse prevention; when an account is deleted they are kept without any link to the deleted account.
• Anonymous trial and conversion events are deleted after roughly 12 months.

Your controls

• Export: from the Account menu, "Download my data" gives you everything your account owns — including full per-turn game snapshots — as one JSON file.
• Delete: from the Account menu, "Delete my account" permanently removes your account and every game, snapshot, replay, analysis, achievement, and leaderboard entry it owns. Feedback you submitted is kept as anonymous product feedback with your account link and contact email removed.
• Questions: email muindas@gmail.com.

Children

ResponseWindow is not directed at children under 13. Do not create an account if you are under 13.

Changes

When this policy changes, we update the date at the top of this page. Material changes will be called out here.

August 2026: added anonymous first-party trial and conversion event collection, including the optional signup referral source (see "What we collect").